kelpdao[.]com-app-connect-v2-wailet[.]com

Analysis of the domain kelpdao.com-app-connect-v2-wailet.com shows that it was registered on 21 February 2026 and is currently taken offline. The page title returned by the server matches the full domain string, confirming that no additional title information is present. The site was identified as a brand‑impersonation campaign targeting the kelp brand. PhishDestroy has already blocked the domain, and the domain appears on a single external blocklist.

VirusTotal reports a single positive detection out of ninety‑five scanners, indicating that at least one security vendor has flagged the host as malicious. Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. The limited detection footprint (one blocklist entry and one vendor flag) suggests that the infrastructure may be short‑lived or low‑profile, but the combination of brand impersonation, recent registration, and a zero trust score warrants an elevated risk rating. No public IP address, hosting provider, SSL certificate details, or Safe Browsing verdict are available in the current dataset, leaving those aspects of the infrastructure unverified.

Defenders should continue to block the domain at perimeter filters, monitor for any resurgence of the same second‑level domain pattern, and incorporate the indicator into threat‑intel feeds. Additional reconnaissance, such as DNS and WHOIS look‑ups, may reveal the underlying IP or hosting service if the domain reappears. Maintaining awareness of the kelp brand impersonation tactic and correlating related email or credential‑theft incidents can help reduce exposure.